IceWarp Merak Mail Server Unspecified Email Login Security Vulnerability
BID:12158
Info
IceWarp Merak Mail Server Unspecified Email Login Security Vulnerability
| Bugtraq ID: | 12158 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 31 2002 12:00AM |
| Updated: | Oct 31 2002 12:00AM |
| Credit: | This vulnerability was announced by the vendor. |
| Vulnerable: |
IceWarp Merak Mail Server 5.3 .0 |
| Not Vulnerable: |
IceWarp Merak Mail Server 5.3.2 |
Discussion
IceWarp Merak Mail Server Unspecified Email Login Security Vulnerability
IceWarp Merak Mail Server is reportedly affected by an unspecified vulnerability regarding email logins. This issue is most likely due to the application failing to properly verify all fields have been supplied for logins, though this has not been confirmed.
The vendor has specified very few details about this vulnerability other than to state it has been addressed in IceWarp Merak Mail 5.3.2. The issue was reported in version 5.3.0, it is not known if earlier versions are also affected.
IceWarp Merak Mail Server is reportedly affected by an unspecified vulnerability regarding email logins. This issue is most likely due to the application failing to properly verify all fields have been supplied for logins, though this has not been confirmed.
The vendor has specified very few details about this vulnerability other than to state it has been addressed in IceWarp Merak Mail 5.3.2. The issue was reported in version 5.3.0, it is not known if earlier versions are also affected.
Exploit / POC
IceWarp Merak Mail Server Unspecified Email Login Security Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
IceWarp Merak Mail Server Unspecified Email Login Security Vulnerability
Solution:
The vendor has addressed this issue in IceWarp Merak Mail Server 5.3.2 and later.
IceWarp Merak Mail Server 5.3 .0
Solution:
The vendor has addressed this issue in IceWarp Merak Mail Server 5.3.2 and later.
IceWarp Merak Mail Server 5.3 .0
-
IceWarp Merak Mail Server Latest Downloadable Version
http://www.icewarp.com/download/merak.zip
References
IceWarp Merak Mail Server Unspecified Email Login Security Vulnerability
References:
References: